$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft File: vTZoYo8N950EfsoNmtz8C2aT4wk.mft (raw, json) Hash identifier: DiWPr5peE5SgKrSYNPxCFav5csrJBgZ5DMbkm35ZAC0= Subject key identifier: 94:52:FA:6A:F1:C6:54:B3:A4:77:E4:90:38:CF:C1:68:41:57:24:91 Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09 Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309 Certificate serial: 0197B7EABCF764BE2539FBDC6FF899874AB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft Manifest number: 1121 Signing time: Sat 28 Jun 2025 19:01:43 +0000 Manifest this update: Sat 28 Jun 2025 19:01:43 +0000 Manifest next update: Sun 29 Jun 2025 19:01:43 +0000 Files and hashes: 1: 1-AkEgtFYAeYpvfsAvZdlJuyuVF4.roa (hash: bj7r1qBjXXo6AEdGvTw884ILliGHjEYqfvi7PxgbBxU=) 2: 18s6iv28JzN23ACcxvidnV4O018.roa (hash: E520J/m/9e2VHqsrljvZsuWV/dovmSdu9Qn56B7khEk=) 3: 7HaXNFSYGxOw3R9L6I0z6V-mXb4.roa (hash: iLQ9KNTQ4u3M1tfa+YEpVxilam6XMDqybBUGCnTqiss=) 4: 8GAUp0koq7cLyKDBljD12_gS9fU.roa (hash: TLK0INhWOPZtOAAlZEJ0okbttAxXwilC0/Fin663h4o=) 5: 8ezldgsZjdYUFJex6k0Ut1HMEC4.roa (hash: bDkmxhsgqaahY46AsODPGEATa+7WHhbve+WtDMm08R4=) 6: FL7xyPZcMQ2IcS_NYdOw64zSnhI.roa (hash: hTtsrLyKX+B71mb+xLolhfXCujGBZZVnGz4ugWVh69Q=) 7: b7dBieR_P9kmLnGcxW0fyaZjeow.roa (hash: 7CjlHKhuVQvksqqfXKK92KNHJPTf/pbKa2kMAV8YPNg=) 8: c-Wnlh-kFjP6q7EkrDX-duWttJc.roa (hash: 6Prgxqh9/nVNm4A4c9/ay2pcayT5Dd+P1lar2QOL0DQ=) 9: dqoXOmYtLktadt9t77Vga0oZ3ak.roa (hash: chC6NGbZZNFg9HQVBofvVOgVsfGvh3dG96OgkPCj2TI=) 10: e_TrdC1EfOVSQQ49ZA0FeaTTzjk.roa (hash: jUrwE90O+dclJeJNaa2stLGSCRfUe/eu1j5NSomJE/4=) 11: hVFH86LVYnyePIbmaCqfpS5vJKM.roa (hash: Jp2Ho2sVrxwbPVnhT98cuAw+l3HPTfx4q1sSUogMvrs=) 12: iL4hRCpLyAzkS7iRbK0kB-K-W-4.roa (hash: ZPL3tMdQLbuvPkq9q+UlEUarVrYcyMhTXlq7N8fBMNw=) 13: kPQEqnQ2tyC7d6-aTILssWet_yM.roa (hash: 1lTdkFvpUx4+IWByR4mFr+hq9dYheTg8typs5YnbW5g=) 14: oo68fdLP_MI4Rwlcq0C2I-y_K9g.roa (hash: UGZ9aKbm2nLCSA0ehujHTDQj51oKQ6d9RZi7a5m0ANs=) 15: pVgxUhCc7dPqvhiu0OhGRnn06X4.roa (hash: H5Zdm7znexs+7FCW+NTfkFJPDw3F/Gamb5QXizhY9Tk=) 16: pXb2BHcIMWoEt176mDnHX2eUQwo.roa (hash: c80j1v8Q2KRhUOiHX3xcSk3hTBR2+iNkEM9MIAJzxDc=) 17: tBvdEHK96-8IqXDimpyAd6-FvfI.roa (hash: kV3wVJLyHXbFkaWXeqnUNYEgcOQg7ySmIasAR3i9gU0=) 18: vTZoYo8N950EfsoNmtz8C2aT4wk.crl (hash: PWYwtcI9+RmMAxGlFX7U4KdzjGPu1jClJPAqgaw2j+U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:ea:bc:f7:64:be:25:39:fb:dc:6f:f8:99:87:4a:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309 Validity Not Before: Jun 28 19:01:43 2025 GMT Not After : Jun 29 19:01:43 2025 GMT Subject: CN=9452fa6af1c654b3a477e49038cfc16841572491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:6a:d0:46:47:20:de:d7:c6:2a:1e:13:19:a3: 8c:c6:51:c7:f8:ea:aa:63:40:13:2d:fa:fd:b9:4e: 66:91:62:1a:54:25:d3:c5:64:af:f3:eb:1c:94:5f: e1:36:25:a1:53:6a:35:de:6c:c4:b8:51:9c:d2:e4: 60:01:2e:f5:8c:b8:af:1d:e9:f6:08:09:11:b1:4f: 77:3b:90:1b:4a:3f:46:32:dc:ca:2f:07:fe:01:c1: 67:49:d2:88:0e:9f:6f:7a:5d:a1:2d:af:bb:1a:3d: 22:1e:54:9e:7b:46:16:79:f7:53:bf:55:84:7c:c7: fc:16:0f:c0:41:91:68:ab:bb:b1:27:1d:7d:a6:68: 9d:3b:6e:09:a3:1c:b1:0b:de:d2:db:80:74:1b:cd: 5e:f8:b0:e7:64:7e:e3:f9:87:00:02:82:5c:29:b6: 21:50:70:6f:50:2c:3c:2d:d0:6b:40:ea:e1:13:bf: 43:b7:82:cb:40:22:ac:28:31:34:c2:4d:90:43:78: 79:89:fa:1a:23:1f:ea:b4:8f:a9:69:b9:55:ee:f8: 37:f5:67:5d:7e:b0:2d:28:e3:b6:96:07:b3:5c:a3: 9f:89:b2:a0:03:72:0c:f4:af:45:d0:35:fc:97:b3: 27:1a:ad:da:89:78:bd:68:75:0f:22:d2:14:e7:43: 13:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:52:FA:6A:F1:C6:54:B3:A4:77:E4:90:38:CF:C1:68:41:57:24:91 X509v3 Authority Key Identifier: keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:07:3d:66:63:bc:59:5d:0c:bd:86:5a:18:f6:b7:39:38:59: d7:b8:a2:5c:16:9c:a4:e7:eb:f7:b8:13:bc:ab:62:d4:15:23: 55:55:be:56:ff:8d:90:b9:a0:2b:c3:31:a8:b9:77:9e:59:66: f3:28:89:c6:fd:da:3b:2b:e7:75:bc:22:39:02:82:97:80:1e: 81:8e:b1:7f:28:fb:fd:02:86:98:60:4c:15:89:f9:ee:ca:59: 99:81:d9:e3:ac:52:99:9f:4b:a0:3b:20:4f:19:ed:53:94:0c: be:95:5e:5d:8f:85:7b:34:48:4c:d7:40:a8:e4:f7:fe:03:3b: 88:ef:f8:4d:42:3e:e8:51:a2:0a:b2:75:f8:9b:7d:6c:aa:e5: 34:21:ae:1d:8f:7a:f3:5d:3e:b9:ef:a9:eb:38:df:9c:e0:98: aa:e5:92:f2:1c:cb:43:53:94:17:4f:74:67:ec:69:5a:97:f1: 1c:29:ff:f3:1d:dd:7c:42:17:e4:fa:6b:1c:54:71:cd:ee:7a: 68:c7:9e:51:65:42:fd:1b:5b:ee:63:d0:17:2d:e7:55:d6:ec: 9b:9e:f7:69:83:eb:40:3b:45:72:f9:1b:ab:ca:a0:57:bf:cb: 69:31:e5:db:5d:40:ed:52:4a:59:19:17:a2:e4:4b:88:b6:b1: e1:99:75:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe36rz3ZL4lOfvcb/iZh0q5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkMzY2ODYyOGYwZGY3OWQwNDdlY2EwZDlhZGNmYzBiNjY5 M2UzMDkwHhcNMjUwNjI4MTkwMTQzWhcNMjUwNjI5MTkwMTQzWjAzMTEwLwYDVQQD Eyg5NDUyZmE2YWYxYzY1NGIzYTQ3N2U0OTAzOGNmYzE2ODQxNTcyNDkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mrQRkcg3tfGKh4TGaOMxlHH+Oqq Y0ATLfr9uU5mkWIaVCXTxWSv8+sclF/hNiWhU2o13mzEuFGc0uRgAS71jLivHen2 CAkRsU93O5AbSj9GMtzKLwf+AcFnSdKIDp9vel2hLa+7Gj0iHlSee0YWefdTv1WE fMf8Fg/AQZFoq7uxJx19pmidO24JoxyxC97S24B0G81e+LDnZH7j+YcAAoJcKbYh UHBvUCw8LdBrQOrhE79Dt4LLQCKsKDE0wk2QQ3h5ifoaIx/qtI+pablV7vg39Wdd frAtKOO2lgezXKOfibKgA3IM9K9F0DX8l7MnGq3aiXi9aHUPItIU50MTWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJRS+mrxxlSzpHfkkDjPwWhBVySRMB8GA1UdIwQY MBaAFL02aGKPDfedBH7KDZrc/Atmk+MJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMt ZTZiZjMxNmM5NGExLzEvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMtZTZiZjMxNmM5NGEx LzEvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjQc9ZmO8 WV0MvYZaGPa3OThZ17iiXBacpOfr97gTvKti1BUjVVW+Vv+NkLmgK8MxqLl3nllm 8yiJxv3aOyvndbwiOQKCl4AegY6xfyj7/QKGmGBMFYn57spZmYHZ46xSmZ9LoDsg TxntU5QMvpVeXY+FezRITNdAqOT3/gM7iO/4TUI+6FGiCrJ1+Jt9bKrlNCGuHY96 810+ue+p6zjfnOCYquWS8hzLQ1OUF090Z+xpWpfxHCn/8x3dfEIX5PprHFRxze56 aMeeUWVC/Rtb7mPQFy3nVdbsm573aYPrQDtFcvkbq8qgV7/LaTHl211A7VJKWRkX ouRLiLax4Zl1gA== -----END CERTIFICATE-----Generated at Sat Jun 28 21:22:46 2025 by rpki-client